Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8A flaw was found in Keycloak.May 19, 2026
- Medium4.9A flaw was found in Keycloak.May 19, 2026
- Medium6.9The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment.May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.May 19, 2026
- High8.2Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 character…EPSS 0.6%May 18, 2026
- Critical9.3Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any applica…EPSS 0.6%May 18, 2026
- Low2.1A vulnerability has been found in Tencent WeKnora up to 0.3.6.EPSS 0.4%May 18, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.0Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.6Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.May 15, 2026
- High8.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.May 15, 2026
- High7.1Tuist is a virtual platform team for Swift app devs.May 14, 2026
- High8.6Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent ti…May 14, 2026
- Medium4.9gittuf is a platform-agnostic Git security system.May 14, 2026
- Medium6.5Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.May 14, 2026
- High8.6Aegra is a drop-in replacement for LangSmith Deployments.May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.EPSS 0.3%May 14, 2026
- Medium6.8Authorization bypass through User-Controlled key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd.May 14, 2026